PT-2019-18135 · Bd · Bd Facslyric Research Use Only

Published 2019-02-06 · Updated 2020-10-19 · CVE-2019-6517

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BD FACSLyric Research Use Only versions between November 2017 and November 2018 BD FACSLyric IVD is not affected as it properly enforces user access control.

Description The issue concerns improper enforcement of user access control to privileged accounts. This may allow unauthorized access to administrative level functions.

Recommendations For BD FACSLyric Research Use Only between November 2017 and November 2018, consider restricting access to administrative level functions until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-6517

Affected Products

Bd Facslyric Research Use Only

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6517 · Security Note
• http://securityfocus.com/bid/106766 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-029-02 · Note